Using kerberos ticket on web browsers

[Michael B Allen]

On Wed, 6 Dec 2006 13:33:20 -0300
"Diego Lima" <diego-lima at prodesan.com.br> wrote:

> On Wed, 6 Dec 2006 16:22:27 -0000, Tim Alsop wrote
> > What URL are you using when you request access to the web site ? 
> 
> I can reach the website through its IP address or its DNS name (estagiario6).
> So I can access both using http://192.168.130.222 or http://estagiario6. I

You cannot use an IP address. The hostname in the URL must exactly match
the hostname of the SPN for the service account.

For example if the SPN is HTTP/estagiario6.sso.com.br at SSO.COM.BR then you
MUST use a URL of http://estagiario6.sso.com.br/ to access the site. Any
deviation from that will not work.

Mike

-- 
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/